Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft
File:                     8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft (raw, json)
Hash identifier:          kd4QXNUyDlan06Net9ZFwZOjpxCge23YQYVgwMYFg1c=
Subject key identifier:   99:9A:BA:2C:A3:7F:8A:27:52:3F:3C:10:15:33:C4:3F:CA:79:EF:5A
Authority key identifier: F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81
Certificate issuer:       /CN=A912963D/serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981
Certificate serial:       1071
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft
Manifest number:          10C1
Signing time:             Tue 22 Sep 2026 17:21:24 +0000
Manifest this update:     Tue 22 Sep 2026 17:21:23 +0000
Manifest next update:     Tue 29 Sep 2026 17:21:23 +0000
Files and hashes:         1: 8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl (hash: mVVAzr3Aoj+LlYfIF+ktt6UuvleRBo9CNpjyud5FF6k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl
                          rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4209 (0x1071)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912963D, serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981
        Validity
            Not Before: Sep 22 17:21:23 2026 GMT
            Not After : Sep 29 17:21:23 2026 GMT
        Subject: CN=6ab2b914-b473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a5:91:bc:13:12:2b:70:47:4c:14:1a:16:4d:
                    9d:28:4f:22:7a:46:02:af:4a:76:d6:3f:6d:8f:2d:
                    08:69:34:ff:3b:d7:2e:75:ab:7d:42:50:d3:c2:32:
                    1c:bb:cc:88:a8:ca:3e:cc:9b:bf:d5:81:98:a4:7c:
                    a4:d6:85:5a:ba:d6:bc:dd:78:3b:aa:8a:9c:6c:0e:
                    bd:d5:63:9e:46:c1:f2:62:df:d4:b0:ed:07:a3:bc:
                    b1:a4:62:a6:de:d0:cd:b7:d7:c1:63:7e:01:f4:82:
                    c6:94:97:94:4d:d4:ed:f4:f4:aa:ae:b9:36:72:08:
                    65:86:63:19:0a:48:ac:1a:d7:ab:db:d9:7e:e7:c5:
                    d5:e8:8e:72:04:da:f5:44:55:e8:9c:be:20:8d:31:
                    a9:fe:53:92:48:e4:63:1f:b6:23:93:22:ee:60:3a:
                    77:82:6e:9d:c1:d8:ad:9f:95:3d:9e:4f:11:2d:b2:
                    9f:59:f7:c3:6c:eb:2c:52:4e:38:01:f1:a4:8c:b9:
                    4a:4c:7a:6c:a9:8b:25:33:a3:de:8b:70:72:2a:e8:
                    7d:8e:e8:da:39:a8:44:51:ba:00:73:7b:7c:38:a8:
                    78:7a:36:69:3f:41:57:0d:7f:ca:ba:4d:f4:a3:5b:
                    85:66:66:02:8e:8d:b2:dc:1d:f0:0c:fa:6f:7b:92:
                    e2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9A:BA:2C:A3:7F:8A:27:52:3F:3C:10:15:33:C4:3F:CA:79:EF:5A
            X509v3 Authority Key Identifier:
                keyid:F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:96:32:92:6e:66:a9:af:06:85:d9:5e:77:1b:43:8f:b4:e0:
         2f:77:76:f1:b1:91:a0:e2:7c:fd:30:3b:29:e1:7e:ad:da:2c:
         3c:f5:1d:70:2a:e4:1d:76:29:8e:60:4e:f1:a3:89:06:16:1a:
         c6:94:b6:71:94:17:4c:1e:81:a9:9f:a0:63:9d:1b:7b:64:35:
         38:d2:1c:88:39:80:82:37:c9:70:bf:97:f3:89:85:39:71:dd:
         20:04:4b:22:76:dd:22:52:74:9d:0e:a2:3a:e7:8b:c6:d7:a1:
         9e:4d:1e:56:59:f3:35:e1:46:61:f8:e1:26:0d:ee:17:a0:0b:
         99:be:dc:de:b5:5b:ca:36:bb:f6:e1:e1:c6:4e:02:89:ab:c3:
         3a:a1:39:65:c7:61:4b:e2:21:e5:56:cc:24:e8:46:49:47:79:
         2f:21:0a:8e:2f:8b:bf:59:8d:1b:c9:62:eb:92:c0:9f:22:fa:
         a0:6b:96:39:2c:97:6c:95:c5:17:bd:9b:e1:ba:fe:9a:a9:55:
         bb:bf:55:c3:a6:26:bb:4b:0b:82:7c:98:20:bb:16:bf:c8:92:
         f0:eb:9a:ce:eb:9d:7a:82:0f:6e:aa:17:50:55:92:44:1f:45:
         c0:c7:ef:fb:78:15:0e:a1:56:1b:d2:d2:dd:5d:d3:06:4f:c6:
         f2:5e:d7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:26:33 2026 by rpki-client